Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/CjMAEd4Za59ICrpDcjmphJMDCHk.roa
File:                     CjMAEd4Za59ICrpDcjmphJMDCHk.roa (raw, json)
Hash identifier:          z+2zBa+EB2KJLmlcr7YbR5s4+5d7h9AHzUbPgjcHP5k=
Subject key identifier:   0A:33:00:11:DE:19:6B:9F:48:0A:BA:43:72:39:A9:84:93:03:08:79
Certificate issuer:       /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial:       0771B952
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/CjMAEd4Za59ICrpDcjmphJMDCHk.roa
Signing time:             Wed 09 Feb 2022 11:02:25 +0000
ROA not before:           Wed 09 Feb 2022 11:02:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201086
IP address blocks:        2a0f:641::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124893522 (0x771b952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
        Validity
            Not Before: Feb  9 11:02:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a330011de196b9f480aba437239a98493030879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:4c:e9:bf:7f:a8:ad:f3:75:80:29:7a:bc:
                    27:7d:9d:6b:31:17:f4:1b:cc:99:6e:48:a4:1a:37:
                    f9:ce:44:77:10:0b:48:87:11:b7:bf:53:e3:06:89:
                    50:53:ed:c8:bb:09:51:e0:2b:fb:b1:fe:44:1d:fc:
                    7b:49:a5:68:c2:77:39:0e:21:5b:ad:4d:3a:4d:41:
                    29:5a:58:79:91:c1:2b:45:b6:af:d2:39:06:79:1c:
                    3d:33:b9:e8:e7:28:46:ff:41:e0:fa:4a:db:0e:59:
                    4a:89:de:c5:f8:51:bb:05:aa:e8:c7:95:45:40:1c:
                    e3:22:21:97:52:51:6b:ce:e8:d4:10:30:0e:b8:9f:
                    3e:4d:b0:92:e3:a6:a6:49:ed:ed:40:83:c1:96:99:
                    dc:1d:fe:5e:81:9e:ae:42:9b:3a:01:1d:3b:f3:7a:
                    1c:f3:85:93:d3:d4:c9:64:aa:c3:c7:a5:69:f5:d2:
                    15:b3:40:97:8d:e1:c7:92:e1:5b:87:d2:6b:9b:b4:
                    82:ae:72:18:bd:6b:2f:03:f4:3f:a0:c5:8b:67:63:
                    a3:94:97:47:63:97:87:65:ee:55:be:f0:f2:ba:47:
                    74:bc:29:fa:c7:97:a2:9e:d8:a7:36:85:4b:b2:e0:
                    fe:48:35:25:11:3b:33:69:69:7c:01:9c:d3:c8:ef:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:33:00:11:DE:19:6B:9F:48:0A:BA:43:72:39:A9:84:93:03:08:79
            X509v3 Authority Key Identifier:
                keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/CjMAEd4Za59ICrpDcjmphJMDCHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:641::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:bd:53:06:0a:c8:ba:09:2a:d3:10:d9:e3:e2:ed:38:91:
         22:b3:56:7b:5a:66:54:5d:b7:f7:a8:57:76:05:b7:ab:e1:79:
         eb:df:2e:17:e1:a0:4c:ea:78:d6:02:b3:a2:94:39:c9:06:8a:
         77:db:dd:f4:21:e8:9e:37:2b:e3:5c:1a:1c:b8:32:8f:da:f3:
         4f:55:7e:5b:e2:ae:5c:ee:83:30:4d:60:7e:bd:c0:64:17:a9:
         23:b6:8f:f7:23:13:52:e5:c2:6b:10:02:b9:20:fd:6d:4f:cb:
         31:c1:a0:16:03:0a:ef:dc:f4:55:19:d2:28:29:e8:93:26:24:
         c4:55:f9:b4:0b:d9:ab:1d:5b:42:ce:59:70:9c:da:37:11:cf:
         f2:22:e4:7d:1d:6f:88:33:e0:8b:e5:a3:42:fb:be:91:f9:f1:
         c8:16:d2:fc:fe:7d:7e:82:9c:15:2a:20:b9:08:54:b1:51:97:
         43:e1:e6:d9:98:cc:6a:ba:f3:16:64:a8:55:a5:d0:59:a2:e1:
         1a:35:96:88:a3:09:b3:4d:99:a1:10:7f:f0:8a:ef:4d:cf:47:
         df:0d:e3:56:d5:53:52:fa:78:b1:46:55:b6:73:54:bc:cd:53:
         3b:7e:2a:9d:c9:a9:89:b4:1d:1a:62:63:15:b4:31:76:b2:e5:
         e5:8f:fe:f1
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEB3G5UjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NjQ5N2Q4NDUzYzVlZTNlYmJiMzg4ZTFhNDdhMTk1ZmYzMGZlMDA5MB4XDTIyMDIw
OTExMDIyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGEzMzAwMTFkZTE5
NmI5ZjQ4MGFiYTQzNzIzOWE5ODQ5MzAzMDg3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlGTOm/f6it83WAKXq8J32dazEX9BvMmW5IpBo3+c5EdxAL
SIcRt79T4waJUFPtyLsJUeAr+7H+RB38e0mlaMJ3OQ4hW61NOk1BKVpYeZHBK0W2
r9I5BnkcPTO56OcoRv9B4PpK2w5ZSonexfhRuwWq6MeVRUAc4yIhl1JRa87o1BAw
DrifPk2wkuOmpknt7UCDwZaZ3B3+XoGerkKbOgEdO/N6HPOFk9PUyWSqw8elafXS
FbNAl43hx5LhW4fSa5u0gq5yGL1rLwP0P6DFi2djo5SXR2OXh2XuVb7w8rpHdLwp
+seXop7YpzaFS7Lg/kg1JRE7M2lpfAGc08jvX+sCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQKMwAR3hlrn0gKukNyOamEkwMIeTAfBgNVHSMEGDAWgBQWSX2EU8XuPruz
iOGkehlf8w/gCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ZrbDloRlBGN2o2N3M0amhwSG9aWF9NUDRBay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDQvYzk3ZmNmLTFhOGQtNGFjOS1iZmVhLWIyMzRkZDZlZDYzNy8x
L0NqTUFFZDRaYTU5SUNycERjam1waEpNRENIay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQv
Yzk3ZmNmLTFhOGQtNGFjOS1iZmVhLWIyMzRkZDZlZDYzNy8xL0ZrbDloRlBGN2o2
N3M0amhwSG9aWF9NUDRBay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoPBkEwDQYJKoZIhvcNAQELBQAD
ggEBAH8IvVMGCsi6CSrTENnj4u04kSKzVntaZlRdt/eoV3YFt6vheevfLhfhoEzq
eNYCs6KUOckGinfb3fQh6J43K+NcGhy4Mo/a809VflvirlzugzBNYH69wGQXqSO2
j/cjE1LlwmsQArkg/W1PyzHBoBYDCu/c9FUZ0igp6JMmJMRV+bQL2asdW0LOWXCc
2jcRz/Ii5H0db4gz4Ivlo0L7vpH58cgW0vz+fX6CnBUqILkIVLFRl0Ph5tmYzGq6
8xZkqFWl0Fmi4Ro1loijCbNNmaEQf/CK703PR98N41bVU1L6eLFGVbZzVLzNUzt+
Kp3JqYm0HRpiYxW0MXay5eWP/vE=
-----END CERTIFICATE-----